Guided paths

1. Local playground

Build, xorappsec demo, send benign and attack requests, read the dashboard.

2. Protect an existing origin

Point --upstream at your app. Start in detect-learn.

3. Kubernetes with Helm

Build the image, install the chart, persist data-dir, keep :9090 private.

4. NGINX, Kong, or Envoy in front

Edge terminates TLS; xorappsec inspects; trusted-proxies make client IP real.

5. Graduate to prevent-learn

Read learning levels, add trusted sources, flip the mode.

6. Load a supervised artifact

How --supervised-model and config/supervised.json work.